Data breach at medical billing firm MCBS affects 1.26 million people

The PEAR ransomware group claimed responsibility for a data breach at Medical Computer Business Services (MCBS), a Georgia-based medical billing firm, which exposed sensitive personal and health information of 1.26 million individuals. The breach occurred between September 22 and 26, 2025, with threat actors exfiltrating 3.3 terabytes of data, including Social Security numbers, medical histories, and insurance details. The stolen data has been fully leaked online, and MCBS has notified affected individuals to take protective measures such as placing fraud alerts on their credit files.

AI-extracted · verify before operational use